U.S. Department of Justice 



Federal Bureau of Investigation 

Washington, D. C. 20535 


ESQ. MARCIA HOFMANN 
ELECTRONIC FRONTIER FOUNDATION 
454 SHOTWELL STREET 
SAN FRANCISCO, CA94110 


FEBRUARY 11, 2008 


Subject: SYSTEM DCS-3000 and RED HOOK 
FOlPANos. 1056287- 000 and 1056307-1 


Dear Requester: 


The enclosed documents were reviewed under the Freedom of Information/Privacy Acts (FOIPA), Title 5, 
United States Code, Section 552/552a. Deletions have been made to protect information which is exempt from 
disclosure, with the appropriate exemptions noted on the page next to the excision. In addition, a deleted page 
information sheet was inserted in the file to indicate where pages were withheld entirely. The exemptions used to 
withhold information are marked below and explained on the enclosed Form OPCA-16a: 


Section 552 Section 552a 


13 (b)(1) 

□(b)(7)(A) 

□(d)(5) 

53(b)(2) 

□(b)(7)(B) 

□(f)(2) 

□(b)(3) 

53(b)(7)(C) 

□(k)(1) 


□(b)(7)(D) P(k)(2) 



□(b)(7)(F) 

□(k)(4) 

□(b)(4) 

□(b)(8) 

□(k)(5) 

□(b)(5) 

□(b)(9) 

□(k)(6) 

® (b)(6) 


□(k)(7) 


991 page(s) were reviewed and 383 page(s) are being released. 


a Document(s) were located which originated with, or contained information concerning other 
Government agency(ies) [OGA]. This information has been: 


□ referred to the OGA for review and direct response to you. 

n referred to the OGA for consultation. The FBI will correspond with you regarding this 
information when the consultation is finished. 


□ You have the right to appeal any denials in this release. Appeals should be directed in 
writing to the Director, Office of Information and Privacy, U.S. Department of Justice, 1425 
New York Ave., NW, Suite 1 1 050, Washington, D.C. 20530-0001 within sixty days from the 
date of this letter. The envelope and the letter should be clearly marked “Freedom of information 
Appeal” or “Information Appeal.” Please cite the FOIPA number assigned to your request so that it 
may be easily identified. 

□ The enclosed material is from the main investigative file(s) in which the subject(s) of your request 
was the focus of the investigation. Our search located additional references, in files relating to other 



individuals, or matters, which may or may not be about your subject(s). Our experience has shown, 
when ident, references usually contain information similar to the information processed in the main 
file(s). Because of our significant backlog, we have given priority to processing only the main 
investigative file(s). If you want the references, you must submit a separate request for them in writing, 
and they will be reviewed at a later date, as time and resources permit. 

a See additional information which follows. 


Sincerely yours, 


David M. Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Records Management Division 


Enclosure(s) 


Please be advised that this is the tenth and final interim release as ordered by the court on May 7, 2007 
for documents concerning surveillance systems known as DCS-3000 and Red Hook. 

The first page of this correspondence reflects that 991 pages were reviewed for this release. There 
were actually 1 ,619 pages reviewed, however, after a review by the technical operations group that manages the 
system, they determined that 628 pages of this material was not responsive to the request. 

A decision has not been made concerning your request for a waiver of fees. We will be corresponding 
with you concerning that request in the near future. In the interim, we are providing you with the enclosed documents. 
Pursuant to Title 28, Code of Federal Regulations, Section 16.1 1 , there is a fee of ten cents per page for duplication. 
No fees are assessed for the first 1 00 pages. If it is determined that you do not qualify for a fee waiver, duplication 
fees will be assessed accordingly. 



EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to the internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute(A) requires that the 
matters be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for 
withholding or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation 

with the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement 

records or information ( A ) could be reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person 
of a right to a fair trial or an impartial adjudication, ( C ) could be reasonably expected to constitute an unwarranted invasion of personal 
privacy, ( D ) could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or 
authority or any private institution which furnished information on a confidential basis, and, in the case of record or information compiled 
by a criminal law enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security 
intelligence investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law 
enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such 
disclosure could reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or 
physical safety of any individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce 

crime or apprehend criminals; 

(k) ( 1 ) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 18, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 



(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 
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Pens 

Statistics on Pens RE: auestion on 
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FW: DCS PC format Pen Register Raw 
Data field 
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a 
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] RE: Re current pen 
registers 

b2 

b7E 



UNCLASSIFIED 



From: 

Sent: 

To: 

Subject: 


bo 

b7C 


1 (RMD) (FBI) 


A^fcjFOHKATION CONTAINED 

heIHn IS UNCLASSIFIED 

DATE 08-01-2007 BY 65179 DHH/KSR/cb 


]]lTOD) (FBI) 


Wednesday. Novembe r 29. 2006 1,71 PM 
1 | (ITOD) (FBI) l , , ,, 

FW: Draft tu 


U(ITOD)(CON) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Let me know if you have any comments. 


— Original Messc 

From: 

Sent: 


]oTD)(CON) 


1 w 1 

29, 2006 11:3^1 , 

rOTDXCONII Jo 

i „ igiBLff 

Bill _ IrtOD) (FBI)l 


^IfWFI (t 


~ \ 0TD )( roN f 


~l(OTD) (FBI)F 


[OTD) (FBI) 


3OTD) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Please review the draft EC and let me know if you have any problems with it before I send it up the chain for approval and 
dissemination. 

W e need to have field offices identify POCs responsible for receiving, reviewing, and correcting TA Upload Error Reports 
tha j | is currently generating and sending out to some of the field offices. 

ThisECis intended to bring folks up to date with the work we have undertaken. 

Some of you are listed as task POCs in the EC. 

Please let me know if you have any problems whatsoever with this draft. b 6 

b7C 


I talked tc | | about the need for the EC and told him I would draft it. The draft I produced is attached. 


I am un 


Portable with the projected completion date of 31 Mar 2007. We are completely dependent upon the DCS 3000 
’developers to finish the job by then. Maybe we want to weasle the wording on it a bit. 


CZ1 

I highlighted several thin< 

1 . Approv al chain. Shouli 

2. Case ID[ 




am not sure it I got the drafted bv line 
’ ind the initial^. 


not sure about: 

| be in there? 

](Pending) is the original EC that went o ut on July 12, 2005. 
u.. i: <ct. jhe original EC hacj^ 


jjorre< 


]on that line. I replace d | with 


4. 1 did not know what to do with the XXXX in the ETMUXXXX.wpd at the bottom of each p 
5. CC line 



Telephone 
pplications Upload.. 


b6 

hlC 




ELSUR Data Management System (EDMS) 

ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTD) 

Phone: 703l I 

Cell: 540 -| ~| 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 



(Rev. 01-31 -2003 ) 


^LL INFORMATION CONTAINED 
flHREIN IS UNCLASSIFIED 

DATE 08-01-2007 BY 65179 DMH/KSR/Cb 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: PRIORITY 


Date: 11/28/2006 


To: All Field Offices 


Attn: All SACs 

All ASACs 

All Technical Supervisors 
All Technical Advisors 


From: Operational Technology 

Contact : | \ 703- | | 

Approved By: Thomas Marcus C 

| I b6 

Clifford Michael J r b7c 


Drafted By: [ 


]gad 


Case ID #: 2 6 


Title: AUTOMATED UPLOAD OF DOCKETS AND PEN REGISTER DATA INTO 

TELEPHONE APPLICATIONS 


Synopsis: This communication provides a progress report on the 

work completed to date to meet an operational request submitted 
by the Washington Field Office (WFO) last year to automatically 
upload Pen Register Data, collected by electronic surveillance 
(ELSUR) systems, into the Telephone Applications (TA) system 
maintained by the Information Technology Operations Division 
(ITOD) . It also solicits points of contacts (POCs) from field 
offices and feedback concerning implementation, deployment, and 
operations. All tasks necessary to automate the upload process 
should be completed by 3/31/2007. From that point forward, field 
offices will no longer need to manually upload dockets and pen 
register data into TA. Instead, field offices will review and 
correct upload error reports that are sent to their designated 
POCs automatically via Trilogy email. 


Details: In July 2005, OTD presented a plan to implement an 
operational request submitted by the Washington Field Office 
(WFO) to automatically upload Pen Register Data, collected by 
electronic surveillance (ELSUR) systems, into the Telephone 
Applications (TA) system maintained by the Information Technology 
Operations Division (ITOD) . The plan was later revised to 
automatically upload FISA Management System (FISAMS) Dockets into 
TA to meet a TA system prerequisite that dockets must be loaded 


ETMUXXXX.wpd 



To: 

Re: 



All Field Offices From: Operational 


268-HQj- 1243561 ( Pending YJJ7 /12/2005 



Technology 


into TA before corresponding pen register data can be loaded into 
TA. 

A summary of tasks, status, and task POCs are listed 

below: 


Task I: WFO deve lops TA Upload operation al be 
rnnrpnt'. . fltatii a: Comple te. WFO POCs : I | b7C 

| I CTD POC : | { 

Task II: DCS -5000 vendors implement routines 
that send pen register and line data to designated drops within 
the ELSUR Technology M anagement Unit ( ETM U) operational network. b6 

Status: Complete. POC : | ~ OTD b7c 


Task III: ETMU system administrators, located 
at the Engineering Research Facility (ERF) , reformat the pen 
register and line data sent by the DCS- 5000 and perform a manual 
upload of the reformatted data into TA. Status: Ongoing. ETMU 
began manually uploading Pen Register information 11/2005. 
Initially, very high percentages of the Pen Register data that 
was being uploaded was rejected by TA because there prerequisite 
dockets were not loaded. Ma nual uploads wil l cease when 
automation is complete. POC : | | OTD 


Task IV: ETMU system administrators generate 
TA Upload Error Reports and send them to designated field office 
recipients via Trilogy email. Recipients analyze and reconcile 
upload errors. Status: Pen Register Upload Error Reports are 
generated and sent to most field offices on a daily basis for 
reconciliation. ETMU does not have appropriate POCs for all field 
offices. ETMU desires feedback from field offices to improve the 
usefulness of the error reports. Several enhancements have 
alre ady been made base d upon constructive field office feedback. 
POC: | | OTD 

Task V: OGC implements FISAMS Docket 
Services, a secure web-service. FISAMS Docket Services will 
automatically publish FISAMS Dockets. Status: FISAMS Docket 
Services, Version 1.0 is complete. Dockets (less corresponding 
line information) are automatically published shortly after they 
are entered into the FISAMS database. Corresponding line 
info rmation will be pu blished with Dockets in a later release. 
POC: | ~| OGC 

Task VI: ETMU implements ELSUR Solution 
Services (ESS) Docket Services, a secure web- service with 
credentials to subscribe to Dockets published by FISAMS Docket 
Services . ESS Docket services will receive Dockets from FISAMS 
Docket Services, enrich them with line data received from ELSUR 
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TO: 

Re: 



All Field Offices From: 



Operational Technology 


2^68 - HQ- 1243561 ( ( Pending )£ "7/12/2005 


systems, and forward them to the TA Adapter (described below) for 
subsequent uploading. Status: ESS Docket Services, VI. 0, is 
complete. ESS Docket Services is deployed and is receiving 
dockets from FISAMS Docket Services real-time over Trilogy. Work 
proceeds to e nrich the dock ets with line data received by ELSUR 
systems. POC: | 0TD 

Task VII: ETMU implements ELSUR Solution 
Services (ESS) Pen Register Services, a secure web- service which 
processes Pen Register Data dropped by ELSURs systems and then b6 

forwards them to the TA Adapter (described below) . Status: ESS b7c 

Pen Register Services development will begin when Docket Services 
development is completed. In the mean time. Pen Register data 
continues to be man ually uploaded into TA by system 
administrators. POC:| loTD 


Task VIII: ETMU implements TA Adapter, a 
secure web- service, which receives Dockets from ESS Docket 
Services and Pen Register Data from ESS Pen Register Services, 
formats these data, and then sends them to designated ITOD secure 
drops for subsequent uploading by TA and another system. Status: 
TA Adapter development will begin when Pen Register Service 
development is completed. In the mean time, Dockets and Pen 
Register Data continue to b p manually iml naHpd into TA by ETMU 
system administrators. POC: | OTD 


Task IX: ITOD implements TA Automated Docket be 

Upload capabilities, implements TA Automated Pen Register Upload b7c 

capabilities, and generates TA Upload Error Reports. Status: ITOD 
dpvpl onment work proceeds in parallel with other tasks. POC: 

| lTOD 

Task X: ETMU implements a process that 
automatically generates TA Upload Error Reports and sends them to 
field office recipients via Trilogy. Status: The Trilogy Email 
Gateway has been implemented. Reports generation has been 
automated but must be revised to be integrated. Integration of 
the Email Gateway and Reports will follow completion of TA 
Automated Docket and Pen Register Upload capabilities and field 
office identification of operations and technical POCs . 


Task XI: Field Offices designate POCs 
responsible for receiving, reviewing, and correcting TA Upload 
errors and for providing feedback necessary for improving the 
overall TA upload process. Field offices send POC N ame, Field 
Office, and tri logy email account to ETMU POC. POC: | | 
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To: All Field Offices From: Operational Technology 

Re: 268- HQ-1 2 43 5 6?1 ; ( Pending^; !j 7 / 1 2 / 2 0 0 5 

b2 

b7E 

Task XII: Vendor s of other ELSUR systems 
(e.g., DCS- 3 000 , | | dCS- 5000 vendors will 

implement routines that send their pen register and line data to 
designated drops within the ELSUR Technology Management Unit 
(ETMU) operational network. Status: Developm ent is proceeding in 
parallel with other tasks of this work. POC: | ] 

OTD 

Task XIII: End-to-End Integration, Test, 
Verification, and Validation of the Docket and Pen Register b6 

Upload Process; ETMU and Field Offices Cease Manual Docket and b 7 c 
Pen Register Uploads; and Field Offices analyze and reconcile 
Upload Error Reports received via Trilogy email. Statu s : Planned 
completion date is 3/31/2007. POC: | | OTD 


LEAD (s) : 


Set Lead 1: (Action) 

ALL RECEIVING OFFICES 


Designate a POC responsible for: (1) providing feedback 
to ETMU on the TA Upload Process described above and (2) 
receiving, reviewing, and correcting problems identified in TA 
Upload Error Reports. Send a Trilogy email with POC Name, POC 


Field Office. POj 


Telephone Number, and POC Email Address to 
OTD. 


CC: 


Mr. Marcus C. Thomas, QT-E RF 

~1 QT-ERF 

Mr. Michael Clifford. Jr., QT-ERF 
QT-ERF-E 


b6 

b/C 
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From: 

Sent: 

To: 

Cc: 

Subject: 


]][RMD) (FBI) 


3lT0D)(C0N) 


Thursday. August 31 , 2006 7:56 AM 
|ITOD)(CON) 


FW: TA Bug 


J(ITOD)(CON) 


ALL INFORMATION CONTAINED 
HEKE^fcs UNCLASSIFIED 
DATE^P-02-2007 BY 65179 DMH/K3R/cb 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


Please see 


the attached e-mail 


fromQ 


— Original Messaae- 


l essays 


Iknoo) (FBI) 


Thursday. August 31. 200 6 7:09 AM 

To: | K irODKCON) 

Subject: FW: TA Bug 


UNCLASSIFIED 

NON-RECORD 


Can you share this info wittj jin case they didn’t see it. It sounds very interesting. I'm not sure what to do 

about it, just be aware it exists r gilSSS. 


I agree that the floppy shouldn't be used, but now-a-days with the high speed disk drives, I could see people doing this 
more often! 


Original Mess age 

From: | |\IK) (FBI) 

Sent: Tuesday, August 29, 2006 2:06 PM 

To: Telephone Application 

Subject: TA Bug 


Handled byQ 


logged on 8/30/2006 
P101732/06 


be 

b7C 


I NTELLIGENCE ANALYST is having a problem with uploading files using entire connection. 
Entire connection retains the last directory path you selected. If the last file directory does not exist, when you 
upload a file again the system will hang up and it will cause you to reboot your machine. 

RESOLUTION: 

I spoke to the user on the telephone on 8/30/2006. 

One, solution would require you to move the files to the drive H: \ and the same directory all the times. Second 



solution would require you to keep a copy of the last directory upload on the CD. 


UNCLASSIFIED 

NON-RECORD 


Hi Gang - 

I've found a bug in TA. 

This first appeared when we were uploading DCS 3000 data via diskettes. We no longer use diskettes, but I think the 
current error is related to this one, and it'll be easier to explain this way... 

The DCS 3000 machine automatically saves the CDNRS upload file in a folder named the same as the phone number. 
We have been in the habit of putting each phone number on a different disk, to facilitate sending the data to the 
appropriate case file. So for example, sav I have 2 ph one nu mbers for w hich I'm uploading data. I'd have 2 disks. 
Assuming my two phone numbers are 973| land 20l| |the disks’ file structures would look like this: 

Disk A: 1 1 

folder named | | 

folder named CDNRS : b6 

(list of CDNRS files from the DCS 3000 machine) b7c 


Disk B: , b2 

folder nameq | b7E 

folder named CDNRS 

(list of CDNRS files from the DCS 3000 machine) 

To reproduce the error, upload a CDNRS file from the first disk. (Select option 7 for upload 
1 for regular pen register data, select the file to upload from the A drive) 

TA performs the upload. If there are any error files, let them write back to a file on the disk. 
Remove the disk from the A drive. 

Select option 1 for pen register data, 1 for regular pen register data. 

Put the second disk in the A drive. 

Hit the enter key. 

TA will hang. Only rebooting the computer will get you out of it. 


My assumption is that TA is looking for the directory it last uploaded from, which would have been[ | 

This directory doesn't exist on the second disk, and TA doesn't stop looking for it, it just hangs. The work around I 
discovered was to leave the first disk in drive A while you select option 1 for pen register data, select option 1 again for 
regular pen register data, hit the enter key - when the dialogue box pops up for you to select the file, it will default to the 
directory on the first disk where it got the first upload file. Select the H:\ drive (or any drive other than the A drive), switch 
disks, and then select the A:\ drive again and the next file you want to upload. 

Now that we are downloading DCS 3000 data to a CD, and most of us are using a single CD for all of our pen registers, 
this particular bug is rarely an issue. However, it is still a problem when I upload pen register data and then go into option 
9 to generate leads for unknown subscribers. If I select "D'' for download, again, the system will hang and only a reboot 
gets me out of it. I'm assuming that when it trys to bring up the dialogue box to ask where I want the download file from 
the lead generation to be stored, it defaults to the last directory I pointed to - which is a directory on the CD, seeing how I 
just got done uploading DCS 3000 data. Of course, the CD is no longer in the drive, and TA hangs my machine. 

Sorry for the long explanation. . . but as I always upload the latest data right before doing the leads generation this has 
become a source of frustration. 


, option 1 for pen register data, 


Thanks much - 



UNCLASSIFIED 


UNCLASSIFIED 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


IZ] 

Tna\ 


nave an inquiry about statistics for pen uploads. TICTU is asked frequently how many intercepts we 
are supporting. Since we provide capabilities and equipment but don't actually perform the intercepts, this 
is a request which is very difficult for us to get. However, in thinking a bout this it occurs to me that our unit 
does support the field with equipment for^all the pen uploads from the I l and the DCS 3000 sources. My 

question is whether a statistic for how many unique target phone numbers from our unit's supported systems 
1 l and DCSPC) that are input into TA can be obtained? At this point this is an informal fact finding request. 
It has been a long time since we all met and given the fast moving nature of telecommunications I think we all 
need 

to have another meeting. Let me know what you think about this. 

Thanks, 




SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 



ALL I^PRHATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/KSR/cb 


From: 

Sent: 

To: 

Subject: 


~1(RMP) (FBI) 


H (OTD) (FBI) 

Friday. July 21. 200 6 9:32 AM 
I | (ITOD)(CON) 

Statistics on Pens 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 

Tha\ 


nave an inquiry about statistics for pen uploads. TICTU is asked frequently how many intercepts we 
are supporting. Since we provide capabilities and equipment but don't actually perform the intercepts, this 
is a request which is very difficult for us to get. However, in thinking about this it occurs to me that our unit 
does support the field with equipment for all the pen uploads from the | l and the DCS 3000 sources. My 

questio n is whether a statistic for how many unique target phone numbers from our unit’s supported systems 
I I and DCSPC) that are input into TA can be obtained? At this point this is an informal fact finding request. 

It has been a long time since we all met and given the fast moving nature of telecommunications I think we all need 
to have another meeting. Let me know what you think about this. 


b2 

b7E 


Thanks, 



be 

b7C 


SENSITIVE BUT UNCLASSIFIED 



Message 


Page 1 of 1 


(RMD) (FBI) 


]]oTD) (FBI) 


Sent: Friday, August 05, 2005 8:25 AM 

To: | l lTOD)(CON) 

Subject: RE: question on DCS trace file 


ALL INFORMATION CONTAINED 

HEREIN 13 UNCLASSIFIED 

DATE 08-02-2007 BY 65179 BHH/KSR/ cb 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


Here are the current field descriptions: 


Call_number,CaselD,Start_date,Start_time,Stop_date,Stop_time,DCS_server_name,CalLtype,Call_reference_nu 

□ 


O riginal Message _ 

From ! I rrODXCON) 

Se nt: Friday. August 05. ? 00 5 8:04 AM 
TC | | (OTP) (FBI) 

Subject: question on DCS trace file 


UNCLASSI FIED 

NON-RECORD 


Have receiv ed a question from a user wh o wanted to know wh ich field(s) in th d h ie from the the 
DCS3000 fo | [ calls contained ! I Could you let me know. Thanks. 

□ 

b6 

b7C 

UNCLASSIFIED 


UNCLASSIFIED 


5/8/2007 



Message 


Page 1 of 1 


| |(RMD) (FBI) 

From: | [ iTOD) (FBI) 

Sent: Monday, June 06, 2005 2:41 PM 

To: I InTODKCONnJ 

(I I UUKCUN) ! | (IT~D)(CON) 

Subject: FW: DCSPC format 

UNCLASSIFIED 

NON-RECORD 


ALL IHFORHATIOM COHTAIHED 

HEREIU 13 UTfCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/KSE/cb 


](ITOD)(FBI)[ 


b6 

b7C 


O riginal Message 

From d I fOTDI (FBI) 

Se nt: Friday, June 03, 200 5 6:28 PM 

To| l(ITOD) (FBI) be 

Subject: DCSPC format b7c 


UNCLASSIFIED 

NON-RECORD 

b2 

| , , ■ b7E 

Attached is the DCS 3000 output specifications for the | | 



UNCLASSIFIED 


UNCLASSIFIED 


5/8/2007 
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Page 1 of 1 


kRMD) (FBI) 

From: | | lTOD)(CON) 

Sent: Friday, April 15, 2005 12 :03 PM 

To: | |lTOD) (FBI) be 

Cc: | | 1TQD)(C0N) b7< 

Subject: Pen Register Raw Data field 


ALL INFORMATION CONTAINED 

HERE IN 15 UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/KSR/cb 


UNCLASSIFIED 

NON-REC O R D 


[ 


b6 

b7C 


The following pen register programs’ raw data fields are fix length: 

Program Name Format Name 

l| 


Thi j f -aw data field i 

2 | ] SHERRIFF'S OFFICE 

The SHERRIFF'S OFFICE raw data field[ 
3. | ~ PCS 

The PCS raw data field 1 
4. 1 ~| MEMPHIS (ME) 

The MEMPHIS (ME) raw data field A 


l ength is I I 

l ength is | | 

jength is | ~~] 

l ength is j | 


The following pen register program’s raw data fields are not fix length: 



I have att ached an e-mail fronj |that states I - 

used. Th< j ~| system format upload is used by DCS3I 


b2 

b7E 


b2 

b7E 


]systems are no longer 


□ 


b2 

be 

b7C 

b7E 


UNCLASSIFIED 


5/8/2007 




ffiKEm i; 


■ORHATION COHTAIHED 
riS UNCLASSIFIED 
DATE 08-02-2007 BY 6S179 DHH/K3R/cb 


. FW Re current pen registers.txt 

From: | | (itodXcon) 

^n t:' Friday. Ann l'lS. P OOS 9:57 AM 

To: (ITOD)CCON) b6 

Sub ject : FffT K6 cur r en t pen registers b7C 

UNCLASSIFIED 
NON -RECORD 


ent_i 

sic 


iruary 20, 2003 9:48 AM 


Subject: Re: Re current pen registers 


b6 

b7C 


Zfcsystem no longer used) I am not sure if new format is used by another 


_|Csystem no longer used) 
system no longer used) 

I (system no longer used) 
_J(no longer used) 
what format is this? 

1 not being used 


But, upload format used by DCS3000 


b2 

b7E 


[ format being used 
“format being used 
- format being used 

| - I did not know there was a format 

\ (system no longer used) 

I did not know there was a format 


DCS PC - is this similar to DCS? 

1 system being used; using | [ format 


| format being used 


Something to keep in mind most of these formats need updating to 

include more fields of data that is being collected but unable to be pas sed to 
ta because TA database presently is not coded to handle. Have spoke to I “1 

about this and it was decided that we should have a meeting with All to 1 1 

discuss this and provide reports, files etc. for TA to decide how to handle. 


Te i ecommum cati ons Intercept & 
collection Management unit (TICTU) , 

Electronic Surveillance Technology Section 

Page 1 


he 

b7C 



Message 


Page 1 of 1 


From: | 

Sent: Monday, February 28, 200 5 2:29 PM 

To: I [ l (ITOD)(CON)r 

Cc: 


Subject^ 


UNCLASSIFIED 

NON-RECORD 


^Uploads 


](RMD) (FBI) 

]LA) (FBI) 

!0C 

1 


AIL INFORMATION CONTAINED 

HEREIN 15 UNCLASSIFIED 

DATE 08-02-2007 BY S5179 BHH/KSR/cb 


H(ITOD)(CON) 


[ITOD) (FBI) 


:b2 


hC 




Attached is a document containing t he instructions we provide to case agents for 


uploading thei 
uploading thel 


] pen register data. The case agents are currently 

files obtained from the DCS 3000 collection system (I previously 
sent several samples of the I I files to you). The attached document al so provide s 


an explanation of the current issues/problems associated with uploading the 

files. Hopefully this will help you guys to resolve these problems/iss ues. ThariKS Tor 
your help. If you have any questions just call me, 31 0- ] | 


ta[ 


b6 

b7C 


UNCLASSIFIED 


5/8/2007 



ALL JMPHATIOW C OBTAINED 

HEKE^Pb UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/KSP./ cb 


uploading[ 


NOTE: Current problems 


i/itl j [ uploads: 


]PEN DATA 


1 . Uploaded records indicate the time zone of the telephone number. For example all calls for a 
target in the 310 area code indic ate the start and stop times are Pacific Standard Time or Pacific 
Daylight Savings Time. However f R ecords are actually in GMT. Therefore you must subtract 8 
hours during standard time and 7 hours during daylight savings time to determine the accurate 
p acific co ast time of the calls. 

2. | | jen can only upload to a target source record created for TOLLS. It does not work for the 

target source records created for the PENS. 

3. There is not a current method for creating an IMSI or UMFI subscriber record. Only a MIN ( cell 

phone number) subscriber record can be created. Analysts/Aoauisjnust manually link thel Icall 
records by e ntering the MIN in the comments section for eactj jcall record. I 1 

4. Incompletj lattempts to a phone that is out of the coverage area or off) will not 

upload to TA. 1 


b2 

b7E 


If the case agent is aware of these problems and still wants to upload the files here is how they do 

it: 

1 . Request the target number DCS 3000| (files on disk from a tech agent. 

2. Open Telephone Applications 

3. Option 1 TARGET SOURCE MENU 

4. Option 1 ADD A NEW TARGET SOURCE RECORD 

5. Complete the following fields: 

a. TARGET PHONE/CARD 

b. CLASS/ALPHA 

c. FILE NUMBER 

d. CLASSIFICATION 

e. TYPE OF ACTIVITY (Must be TOLLS, not PENS) 

f. START DATE 

g. DURATION 

h. AUTH. DISTRICT 

i. AUTH. TYPE (Must be OTHER) 


Do NOT complete or change any other fields - changes to the other fields, such as£ 
(Y/N), will cause errors when uploading. 

6. Option 7 UPLOAD MENU 

7. Option 8 USER-DEFINED ACTIVITY UPLOAD 

8. Complete the fields as follows: 

a. ACTIVITY TYPE = TOLLS 

b. COMMA DELIMITED = X 
c TARGET PHONE = 2 

dj ! 

e OUTGOING INDICATOR = 13 

f. Tab over to second field for OUTGOING INDICATOR = ORIGINATION 

g. INCOMING INDICATOR = 13 

h. Tab over to second field for OUTGOING INDICATOR = TERMINATION 

i. CALL START DATE = 3 

j. DATE FORMAT = 3 

k. CALL START TIME = 4 

l. END DATE = 5 

m. END TIME = 6 


b2 

b7E 


1 
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ALL IM^^TION CONTAINED 

HEREIN HFUNCLASSIFIED 

DATE 08-02-2007 BY 65179 DMH/KSR/cb 


From: 

Sent: 

To: 

Subject: 


I ) TOD)(CON) 

Monday. Decern ber 1 1 2006 2:50 PM 
I l (ITOD) (FBI) 

DCS3000 inbox search 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


M H 



Pen Register Raw 
Data field 


E| S3 

ReJ , | re: Re current pen 

I I registers 


UNCLASSIFIED 


b2 
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Message 


Page 1 of 1 


ALL INFORMATION CONTAINED 


From: | |(OTD)(FBI) 

Sent: Friday, August 05, 2 005 8:25 AM 

To: | | (I TOD)(C ON) 

Subject: RE: question on DCS | j file 


UNCLASSIFIED 

NON-RECORD 


Here are the current field descriptions: 


Call_number,CaselD,Start_date,StartJime,Stop_date,Stop_time,DCS_server_name,Call_type,Call_reference_nu! 


From: | [ITOD)(CON) 

Se nt: Friday, August 057 200 5 8:04 AM 
To j | (OT P) (FBI) 

Subject: question on DCS | ] file 

UNCL ASSIFIED 

NON-RECORD 


Have received a question from a user who wanted to know which field(s) in the| file from the the 
DCS3000 fori balls containedf [ Could you let me know. Thanks. 


5/8/2007 




Message 


Page 1 of 1 


All INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

(RMD) (FBI) DATE 03-02-2007 BY 65179 PMH/KSR/eb 

From: | |(ITOD)(CON) 

Sent: Friday, April 15, 2005 12 :03 PM 

To: I ~l lTOD)(FBI) b6 

Cc: | |ITOD)(CON) b7c 

Subject: Pen Register Raw Data field 


UNCLASSIFIED 

NON-RECORD 

1=1 

The following pen register programs’ raw data fields are fix length: 


Program Name Format Name 

* i dZH 

The | | raw data field ! l ength is □ 

2. 1 | SHERRIFF'S OFFICE 

The SHERRIFF'S OFFICE raw data field j [ length is | ( 

3. | 1 PCS 

The PCS raw data field 1 l ength is | | 

4 | ~~| MEMPHIS (ME) 

The MEMPHIS (ME) raw data field i l lenath is l 1 


:b2 

b7E 


The following pen register program’s raw data fields are not fix length: 


if 


i 1 

I have att ached an e -mail from| |that states ! b vstems are no longer b7E 

used. Th d b vstem format upload is used by DCS3000. 

b6 

b7C 



UNCLASSIFIED 


5/8/2007 




JMBUHFOEHATIOH C OBTAINED 

HEEEIM 15 UNCLASSIFIED 

DATE 03-02-2007 BY 65179 DHH/KSP./cb 


. FW Re current pen registers. 

From: I I (itod) (con) 

Sen t: Fri day. April 15. 2005 9:57 AM 
To : I I (ITOD) (CON) 

Subject: FW: Re current pen registers 


to 6 


UNCLASSIFIED 
NON -RECORD 


original. Mpssanp--. — 

From: I I 

Sen t: Tfiur sdav. Fe bruary 20, 2003 9:48 AM 


Cc:, 

Subject: Re: Re current pen registers 


□ 


C 


]] (system no longer used) i am not sure if new format is used by another 


f [ (system no longer used) 

j [s ystem no longer used) 

(system no longer used) 

1 | (no longer used) 

I 1 - what format is this? 

| |- not being used 


But, upload format used by DCS3000 


- format being used 
format being used 
format being used 


l did not know there was a format 


H - (system no longer used) 

I did not know there was a format 
DCSPC - is this similar to DCS? 

| |- system being used; using dmw format 


to2 

to7E 


j] format being used 


Something to keep in mind most of these formats need updating to 

include more fields of data that is being collected but unable to be pas sed to 
ta because ta database presently is not coded to handle. Have spoke to | j 
about this and it was decided that we should have a meeting with All to 
discuss this and provide reports, files etc. for ta to decide how to handle. 


I I ITS 

Telecommunications intercept & 

Collection Management Unit (tictu). 

Electronic surveillance Technology section 

Page 1 




|(RMD) (FBI) 


: 


tLL IKFORHATIOH CONTAINED 
IK IS UNCLASSIFIED 
DATE 08-02-2007 BY 65179 DHH/'KSR/'cb 


From: 

Sent: 

To: 

Subject: 


be 

hie 




I ap ologize for the late re sponse. I am trying to catch up on e-mails. DCS 3000 
does collect | |call information. The file however that you attached 

is not from a| |session. The file is the log file for the event messages 

from regular cell call tratfid. 

If you would li ke some sample data from the | j sessions let me know. The 

thing about the ] | is that it is very different from cell calls. A 

demonstration down here at ERF with our test phones would probably b e the easiest wav to 
show you the very "fluid" nature for talking back and forth w ith the | 

service. Also the associates for calls using | |are identified by either the 

IMSI or UFMI numbers (never their ceilular phone numbers ) . 


b2 

b7F, 


eXt 'l I 

»> l I 08 /O 8 8:47 AM »> 

We were sent th e attached file and wer e told that it was a download file from the 3000 
( DCS3000? ) with | 1 calls. Does DCS3000 capture ! j 

calls and is this the format that we would receive them? Is so, how are we supposed to 
interpret the informa tion? If DCS3000 does not capture direct connect calls, do you have 
any information about | | to help us interpret this information? 


b2 

be 

blC 

hlE 




INFORMATION CONTAINED 
^MREIN 15 UNCLASSIFIED 
^TATE 08-02-2007 BY 65179 DMH/KSR/cb 


zz 

From: 

Sent: 

To: 

Cc: 

Subject: 


|(RMD) (FBI) 


Thursday. February 2Q^2003 12:36 PM 
Kt: Ke current pen registers 


"DCSPC" is the header (1st field) for DCS records. Thanks for getting back to us on this. 


ry 20, 2003 9:48 AM 


Subject: Re: Re current pen registers 


□ 


ksystem no longer used) I am not sure if new format is used by another system. 
Jsystem no longer used) 


system no longer used) 

| Jystem no longer used) 

| | (no longer used) 

| [ what format is this? 

| f - not being used 


But, upload format used by DCS3000 


format being used 
[format being used 
format being used 

- I did not know there was a format 
(system no longer used) 

: did not know there was a format 


DCSPC- is this similar to DCS? 


- system being used; using DMW format 
format being used 


Something to keep in mind most of these formats need updating to include more 

fields of data that is being collected but unable to be passed to i 1 

TA because TA database presently is not coded to handle. Have spoke to I I 

about this and it was decided that we should have a meeting with All to discuss this and 

provide reports, files etc. for TA to decide how to handle. 


b6 

b7C 



Telecommunications Intercept & 

Collection Management Unit (TICTU), 
Electronic Surveillance Technology Section 
Information Technology Division 




Message 


Page 1 of 2 


| (RMD) (FBI) 

From: [ ] (ITOD)(FBI) 

Sent: Monday, December 1 1 2006 12:58 PM 

To: I |(R MD) (FBI) 

Cc: I | lTOD) (FBI)Q 

Subject: FW: DCS3000 and Red Hook Canvas 


; b6 ALL INFORMATION CONTAINED 

b7C HEREIN IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DMH/KSR/cb 


}lTOD)(FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I just got a positive response from our Telephone Applications group. This would not be documentation that we 
created, but information that was provided from the field. Please read below and provide guidance on how to 
proceed. 

Thanks. 


b6 

b7C 


Systems Support Section 
Information Technology Operations Division 
Office of the Chief Information Officer 
Rm 9911 

2Q2 \ ~| 


Original Message-;- 

Froms l l (ITOD) (FBI) 

Se nt: Monday. December 11 . 2006 12:5 3 PM 

To j | [ITOD)(FBI) l I CnODXFBI) 

Subject: FW: DCS3000 and Red Hook Canvas 

SENSITIVE BUT UNCLASSIFIED 
NON-REC ORD 


We have data and documents related to the DCS 3000 in our possession. This system, which is 
administered by OTD, generates phone-data in a format that is uploadable by TA. As such, we have 
recieved and generated documents related to supporting this effort. 

It's likely that we also have e-mails that were sent to us by the field, asking us for help in uploading their 
DCS 3000 data into TA. Some or many of these emails will probably also contain the call-records that the 
customer was trying to upload into TA, as attachments. 

We will search our records and locate the pertinent documents and files. How do you want the results? 


b6 

b7C 


5/8/2007 




From: 

Sent: 

To: 

Subject: 



|(RMD) (FBI) 

1 | (ITOD) (FBI) 

Monday. December 11. 2 006 1 1 :09 AM 
I t lTOD) (FBI) 

FW: Dcs3000 duplicate records per call 


|p.L INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED 
DATE 08-02-2007 BY 65179 DMH/KSR/cb 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


An old document talking about capturing DCS-3000 info. 


3 11:09 AM ^ ; b7c 

Subject: Dcs3000 duplicate records per call 

This is about the | I file that we got that seems to have some calls with 2 records 

I talked tc | ~| sp?) at Quantico. He said that on the DCS300 there are additional fields that could give us additional 

information, such as switch type and routing info, to try to determine these c alls. But the field doesn't like to have to 
collect calls through multiple means so they pull the calls through the l Iw hich d oesn't ha ve the additional field. If 
pulled throught the DCS3000 there will still be 2 records for these calls. According tc j | this problem will only happen 
with cellular phones. On incoming calls, in an area where the phone company has mulfpe switches, when a call comes in 
it first goes to the target's "home" switch. If the phone is not there but is at an area for another switch the call will be 
transferred to that other switch. A message will be sent from the home switch and then from that second switch. The 
timestamps will be slightly different since the clocks on the different switches aren't identical. The times are also rounded. 
Engineering had thought about trying to apply a filter to prevent the duplicate records, but are afraid to unless everyone 
would understand the rules. He kept saying how difficult it is to have the computer determine which calls are duplicates 
since it is so hard for us to determine what is a duplicate record even by looking at it. They are afraid that they will 
eliminate the important call. I asked multiple times if the end time on the first record is greater than the start time on the 
second record if we can asume that those are duplicate records. He kept saying no, due to the differences in clocks and 
rounding, but I'm not sure that he was really listening to what I was asking. The durations for each record is the duration 
for the call. The second or two difference is due to the slight extra time that the home switch might have the call. 



b2 

b7E 


I asked what happens if there is a T3 on the phone. First he said that there would be 1 set of audio, then said that there 
may be duplicates, but you could tell easily that it was a dupe by the audio. 


He also said that th ere is a second circumstance that will generate duplicate records per call. This is with an l I 

j [This seems to be if the phone is roaming. In this case there would be 3 records generated, originating, 

anotner type, ana releasing. Very often the releas record is not sent, so you wouldn't then get dups. A filter has been 
implemented for this situation. 


I l a 

cart 


[also said that there is a log file generated by the DCS3000 that give exact information about all of the events of the 
>ut it is very cumberson to go through. 


UNCLASSIFIED 


b6 

b7C 



Message 


Page 1 of 1 


]](RMD) (FBI) 


From: | | (ITOD)(CON) 

Sent: Monday, December 1 1 , 2 006 3:28 PM 

To: | j [ITOD) (FBI) 

Subject: FW: DCSPC format 


ALL INFORMATION CONTAINED 

HEREIN 13 UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DNH/KSR/cb 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


Freedom Of Information data as result of scan. 


- — Original Message- — 

From| [ITOD) (FBI) 

Se nt: Monday. June 0 6. 2005 2:41 PM 

ToJ llTOD)(CON);| l(rTOD) (FBI); I |( ITOD)(CON); 

I r rroDxcoN) 

Subject: FW: DCSPC format 

UNCLASSIFIED 

NON-RECORD 


Orininal Mpssane 

From:) |0TD) (FBI) 

Se nt: Friday, June 03, 200 5 6:28 PM 
To j [ ITOD) (FBI) 

Subject: DCSPC format 

b6 

UNCLASS IFIED b7C 

NON-RECORD 


Attached is the DCS 3000 output specifications for the ) | b2 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


5 / 8/2007 



Message 


b 6 

. b7C 


Page 1 of 1 


From: | I ciTOD) (FBI) 

Se nt: Monday, December 1 1 , 2006 1 1 :05 AM 
To: | r iTQD) (FBI) 

Subject: FW: DCSPC format 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/KSR/cb 


UNCLASSIFIED 

NON-RECORD 


DCS-3000 output specs. 


Drjniml Mptohp- 

From; 

Sei 



Subject: FW: DCSPC format 


b6 

b7C 


](ITOD) (FBI);[ 


}lTOD)(CON); 


UNCLASSIFIED 

NON- RECO RD 


- — Or 

From: 

ninal Mpccmp 

[OTD) (FBI) 


Sent: 

rod 

-riday, June 03, 20O5 6:28 PM 
(ITOD) (FBI) 


Subject: DCSPC format 

b6 


b7C 


UNCL ASSIFIED 

NON-RECO RD 


— Miiauned is the DCS 3000 output specifications for theQ 


b 2 

b7E 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


b2 

b7E 


5/8/2007 



Message 


Page 1 of 1 


be 

[ rMD) (FBI) b7t 

From: | | (ITOD)(CON) 

Sent: Monday, December 1 1 , 2006 1 1 :51 AM 

To: I t lTOD) (FBI) 

Subject: FW: DCSPC format 


ALL INFORHATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/KSR/cb 


UNCLASSIFIED 

NON-RECORD 


— O riginal Message — 

From J I (ITOD^ (FBI) 

Se nt: Monday. June 0 6. 2005 2:41 PM 

Tnj ' ' 


iTOD)(CON) 
Subject: FW: DCSPC format 


b6 

b7C 


]rTOD) (FBI){ 


JlTOD)(CON); 


UNCLASSIFIED 

N ON - R E COR D 


O riginal Message 

From j | (OTD) (FBI) 

Se nt: Friday. Inne 03 . 200 5 6:28 PM 
To| rrTOD) (FBI) 

Subject:’ DCSPC formaf 

b6 

UNCLASSIFIED b7C 

NON-RECORD 


Attached is the DCS 3000 output specifications for the [_ 


□ 


b2 

b7E 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


5/8/2007 



Message 


Page 3 of 4 


□ * 

— Original Message- — . 

From{ j (OTD) (FBI) 

Sent; Thursday. Tune 23, 2005 12:59 PM 

To:| |(ITOD) (FBI) 

Subject: RE: Extraneous characters in raw data 


be 

b7C 


be 

b7C 


b2 

b6 

b7C 

b7E 


UNCLASSIFIED 

NON-RECORD 


□ 


b2 

b7E 


I'm not sure either. Do you know the source of the pen-register data e tc.)? The DCS- 

3000 raw cdnrs d ata is easily discerned by the "DCSPC" me ssage I lEe ESSBflQfl is the source, 

let me know. If the l ] is the source, then | l (officially| [ is the point of 

contact. If the source is something else, then I can try to help you find the right person. 


□ 


O riginal Message 

From ! I (ITOD) (FBI) 

Sent: Thursday, June 23, 2005 11:06 AM 
To J I tOTD) (FBI) 

Subject: Extraneous characters in raw data 

UNCLASS IFIED 

NON-RECORD 

□ 

I've noticed sometimes there will be extraneous characters in the raw data from pen 
registers. I thought we had some answers to this, but I can't find them anywhere. 

We have some records all preceded with a 'K'. I've also seen 'CNI NOT RECEIVED' (which I 
know someone has told us what it means but...). There’s also an 'A', and I thought I've seen 
V. 


Do you have a list of these and what they mean? Or anything that can help explain these? 
We have people asking us, and don't have an answer! 

Thanks much!! 


IT Specialist (Applications Software) 
FBIHQ - Room 8979 

Telephone Applications (TAt 

TA \(Vfth Site] , | 

202 ] I 


UNCLASSIFIED 


5/8/2007 



Message 


Page 1 of 1 


|(ITOD) (FBI) 
Z0OO6 11:03 AM 
l(ITOD) (FBI) 
Subject: FW: fields on DCS3000 |"|file 

UNCLASSIFIED 

NON- R ECORD 

Here's the DCS-3000 record layout. 

— Or iginal Message — - 
From:r |OTOD)(CON) 

Se nt: Friday. August 05. 2005 8:45 AM 

. Tod j (ITOD) (FBI) J 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DMH/KSR/cb 


H(ITOD) (FBDC 


3lTOD)(CON); 


IrrT ODVCO NI 

Subject: fields on DCS3000| File 

' b2 

UNCLASSIFIE D b7C b7E 

NON-RECORD 

In case you get any questions about which fields are which on the trace file from the dcs3000| [calls), 

they are: 

Call_number,CaselD,Start_date,Start_time,Stop_date,Stop_time,DCS_server_name,Call_type,Call_reference_nui 


□ 


h6 

■b7C 


UNCLASSIFIED 


UNCLASSIFIED 


b2 

b7E 


5/8/2007 




Message 


Page 1 of 1 


b6 

| |(RMD) (FBI) b7( 

From: 1 t lTOD)(CQN) 

Sent: Monday, December 1 1 , 2 006 3:31 PM 

To: | |lTOD) (FBI) 

Subject: FW: fields on DCS3000 | | file 

UNCLASSIFIED 

NON-RECORD 


AIL IHF0RMATI0N COHTAIHED 

HERE III IS OTCLASSIFIED 

DATE 08-02-2007 BY 65179 DMH/KSR/cb 


b6 

b7C 


DCS Document 


- — Original Message — 

From] [lTOD)(CON) 

Se nt: Friday. August 05. 2 005 8:45 AM 
Toj l OTOD) (FBI); 

I F itodxcon) 

Subject: fields on DCS3000 trace file 


](ITOD) (FBI); [ 


UNCLASSIFIED 

NON-RECORD 


(ITOD)(CON); 


b2 

b7E 


In case you get any questions about which fields are which on the trace file from the dcs3000 
they are: 1 


Jcalls), 


Call_number,CaselD l Start_date,Start_time,Stop_date,Stop_time,DCS_server_name,Call_type,Call_reference_nui 


b6 

b7C 


UNCLASSIFIED 


UNCLASSIFIED 


5/8/2007 



|(RMD) (FBI) 

From: I | (ITOD)(CON) 

Sent: Monday. December 1 1 . 2006 3:30 PM 

To: | t lTOD) (FBI) 

Subject: FW: Fwd: Cellular Pens 


AL|*FOBJIATI0H CONTAINED 

HEFTXN IS UNCLASSIFIED 

DATE 03-02-2007 BY 65179 PHH/KSR/cb 


UNCLASSIFIED 

NON-RECORD 


Freedom Of Information data as result of scan. 


original. Message— 

From: | I 

Sent : Monday, June 14 , 2003 11:49 AM 

To: I I 

Subject': Kin Fwd: Cellular Pens 


be 

b7C 


Hope this helps. At least there's another contact name. This came from my 
Tech Agent 


Original Message 

Date: 06/16/2003 10:4 7 am -0400 (Monday) 

From : I I 

IQ |— 

Subject : Re: Fwd: Cellular Pens 


] 


b6 

b7C 


I 1 

The records we receive from H Tare ofr t-sineri frorrj | in Kansas City 

and are routed to us via thej | (DCS) in Quantico to our DCS3000 
collection computer in Omaha. 1 


To answer your question, [ 
uploads ‘ r ' c 4 


□ 


| is giving us CALEA complia nt cellular pen information for 

If you have any further questions, | | at ERF, telephone number (703) 

] could be of some assistance. b2 


blC 

b7E 


»> l ■ h&m. 8 ; 33 AM »>. 

This is regaramg| |cellular toll records. I have been out of this part 

for so long - I don't have the answer? Anyone? 


UNCLASSIFIED 


b2 

b6 

b7C 





AL^tf FORMATION CONTAINED 

HE^P IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DMH/KSR/cb 


|(RMD) (FBI) 

From: | | [ITOD)(CON) 

Sent: Monday. December 11. 2 006 3:34 PM 

To: I 1 ITOD) (FBI) 

Subject: FW: FYI 


UNCLASSIFIED 

NON-RECORD 


Freedom Of Information data as result of scan. 


-Original 


To: 

Subject: 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


Without seeing your data, I can only guess that it might be calls where the company captures the initial attempt to call and 
then again when the called person picks up. The durations are always a few seconds different, therefore it is not 
considered a duplicate call, however the start time of the call is the same. Duration of the call is one of the criteria used to 
determine if the call is a duplicate. With other users we have asked them to contact the phone company and see if they 
would only capture the initial call to its completion and not also put in the record for when the called person picks up. If it 
does not appear to be that, then send me the upload file for review. 

Thanks. 


— Original 

From: 

Sent: 

To: 

Subject: 


IDD(FBI) 

7006 3:46 EM. 

J(ITOD)(CON)| 


]dL)(FBI) 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


Thanks - One of the Case Agents who has a current FISA said that his analyst is seeing duplicate entries in TA for the 
same call. I checked the pen data on the DCS 3000 and didn't see any issues. I asked him to provide me w/ specific 
duplicate call printouts from TA so I can try to see what is happening. Any ideas? Once I get the printouts we may 
have a better idea of what they are seeing. 


— original Message-- , 

From: | ](rrOD)(CON) 


]dL)(FBI) 


UNCLASSIFIED b6 

NON-RECORD b7c 


I have not heard anything from the testing folks on the program, 
as I hear something you will know. 


I did not want you to think I forgot about you. As 




From: 

Sent: 

To: 

Subject: 


I | (ITOD)(CON) 

Monday, December 1 1 , 2 006 3:21 PM 
I I flTOD) (FBI) 


FW: FYI 


he 


b.7C 


UNCLASSIFIED 

NON-RECORD 


Freedom Of Information data as result of scan, 

Original Messa pp 

From: I l (Dl)(FBP 

Sent: ■ Tnpsriav Drtnhftr-31, 2006 5:17 PM 

To: I KITOD)(CON) 

Subject: RE: FYI 

UNCLASSIFIED 

NON-RECORD 


Thanks for the info - I’ll let you know what I see when I get the examples. 

Original Message — 

From: I l OTODVCONt 

Sent: Tuesday, October 31. 2 006 3:54 PM b6 

To: | KDL)(FBI) b7C 

Subject: RE: FYI 

UNCLASSIFIED 

NON-RECORD 


Without seeing your data, I can only guess that it might be calls where the company captures the initial attempt to call 
and then again when the called person picks up. The durations are always a few seconds different, therefore it is not 
considered a duplicate call, however the start time of the call is the same. Duration of the call is one of the criteria 
used to determine if the call is a duplicate. With other users we have asked them to contact the phone company and 
see if they would only capture the initial call to its completion and not also put in the record for when the called person 
picks up. If it does not appear to be that, then send me the upload file for review. 




UNCLASSIFIED 

NON-RECORD 


Thanks - One of the Case Agents who has a current FISA said that his analyst is seeing duplicate entries in TA for 
the same call. I checked the pen data on the DCS 3000 and didn't see any issues. I asked him to provide me w / 
specific duplicate call printouts from TA so I can try to see what is happening. Any ideas? Once I get the printouts 
we may have a better idea of what they are seeing. 

Original Mes sage — 

From: I | (ITOD)(CON) 

Sent: Tuesday, October 31, 2006 3: 12 PM b 6 


Freedom of Information 

and 

Privacy Acts 


SUBJECT DCS 3000 

FOLDER: ADDITIONAL CD MATERIAL 
SECTION #7 



Federal Bureau of Investigation 




13 13 13 
p) P> P) 
tQ <q (Q 


1313131313131313 

(U(U(U(U(U{UP)(U 

(QtQlQtQlQlQlQlQ 

(D(D(D(D(D(D(D(D 


13 13 
P) pj 

IQ IQ 

(D (D 


13 13 
P) P) 
iQ IQ 
(D (D 


1313131313131313131313131313 

pjpjpjpjpjpjpjpjpjpjpjpjpjp) 

IQlQtQlQlQtQtQlQlQlQlQlQlQCQ 

(DCDCDCDfDfDfDfDfDfDCDCDCDfD 


1313131313131313131313131313131-3 
P>P)p)P)|UP)|U(USU(UP)|U|Up)|UO 
(Q(Q(Q(Q(QIQ(Q(Q(Q(Q(Q(Q(Q(Q(Q rr 
n>(D(D(D(D(D(D(D(D(D(D(D(D(D(DP) 




trcrcrcrtrtrtrtro'- 

_ _ _ _ _ .r-«lvj<vjsjvjvjv]s]j 

j-j-j-j-j-j-jonnonnoon- 

iOOOOOO'''' 


a <i <i <i <i - 


cnrtrtrcrtrtrcrD' 

I'Jvlsl-J-J-JMHHHMMMMM'J 
3 M H W W H W 


o > 

H H Cl 

^ > o 




Page 

45 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

46 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

47 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

48 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

49 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

50 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

51 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

52 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

53 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

54 

~ 

b2 , 

b6 , 

b7C , 

b7E 

Page 

55 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

56 

- 

b2 , 

b6 , 

b7C, 

b7E 

Page 

57 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

58 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

59 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

60 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

61 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

62 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

63 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

64 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

65 

- 

b2 , 

b6 , 

b7C, 

b7E 

Page 

66 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

67 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

68 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

69 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

70 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

71 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

72 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

73 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

74 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

75 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

76 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

77 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

78 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

79 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

80 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

81 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

82 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

83 

~ 

b2 , 

b6. 

b7C, 

b7E 

Page 

84 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

85 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

86 

- 

b2 , 

b6 , 

b7C, 

b7E 

Page 

87 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

88 

~ 

b2 , 

b6 , 

b7C, 

b7E 


xxxxxxxxxxxxxxxxxxxxxxxx 

X Deleted Page(s) X 

X No Duplication Fee X 

X for this Page X 

xxxxxxxxxxxxxxxxxxxxxxxxx 




Page 

89 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

90 

- 

b2 , 

b6 , 

b7C, 

b7E 

Page 

91 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

92 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

93 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

94 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

95 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

96 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

97 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

98 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

99 


b2 , 

b6 , 

b7C, 

b7E 

Page 

100 

~ 

b2 , 

b6 1 

b7C, 

b7E 

Page 

101 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

102 

~ 

b2 , 

b6 j 

b7C, 

b7E 

Page 

103 

~ 

b2, 

b6 j 

b7Cj 

b7E 

Page 

104 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

105 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

106 

~ 

b2, 

b6 , 

b7C, 

b7E 

Page 

107 

~ 

b2, 

b6, 

h7C, 

b7E 

Page 

108 

~ 

b2, 

b6 , 

b7C, 

b7E 

Page 

109 

- 

b2 , 

b6 , 

b7C, 

b7E 

Page 

110 

~ 

b2, 

b6 , 

b7C, 

b7E 

Page 

111 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

112 


b2 , 

b6 , 

b7C, 

b7E 

Page 

113 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

114 

- 

b2 , 

b6 , 

b7C, 

b7E 

Page 

115 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

116 

~ 

b2, 

b6 , 

b7C, 

b7E 

Page 

117 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

118 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

119 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

120 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

121 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

122 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

123 

~ 

b2 , 

b6 ( 

b7C, 

b7E 

Page 

124 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

125 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

126 

~ 

b2 , 

b6; 

b7C, 

b7E 

Page 

127 

~ 

b2 , 

b6 , 

b7Cj 

b7E 

Page 

128 

~ 

b2, 

b6 j 

b7Cj 

b7E 

Page 

129 

~ 

b2 , 

b6 j 

b7C ; 

b7E 

Page 

130 

~ 

b2 , 

b6j 

b7C, 

b7E 

Page 

131 

~ 

b2 , 

b6 , 

b7C, 

b7E 

Page 

132 

~ 

b2 , 

b6 j 

b7C, 

b7E 


X Deleted Page(s) 
X No Duplication Fee 
v for this Pag- 




Page 

133 

~ 

b2 , 

b6 , 

b7C, 

, b7E 


Page 

134 

~ 

b2 , 

b6 , 

b7C 1 

, b7E 


Page 

137 

~ 

b2 , 

b6 , 

b7C, 

r b7E 


Page 

138 

~ 

b2 , 

b7A, 

, b7C, b7E 

Page 

139 

~ 

b2 , 

b6 , 

b7C, 

, b7E 


Page 

140 

~ 

b2 , 

b6 , 

b7C, 

, b7E 


Page 

141 

~ 

b2 , 

b6 , 

b7C, 

, b7E 


Page 

146 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

147 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

148 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

149 

- 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

150 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

151 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

152 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

153 

~ 

bl. 

b2 , 

b6 , 

b7C, 

b7E 

Page 

157 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

158 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

159 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

160 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

161 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

162 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

163 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

164 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

165 

- 

b2 , 

b6 , 

b7C, 

b7E 


Page 

166 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

167 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

168 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

169 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

170 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

171 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

172 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

173 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

174 

- 

b2 , 

b6 , 

b7C, 

b7E 


Page 

175 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

176 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

177 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

178 

~ 

b2 , 

b6 , 

b7C , 

b7E 


Page 

179 

~ 

b2 , 

b6 , 

b7C , 

b7E 


Page 

180 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

181 

~ 

b2 , 

b6 , 

b7C, 

b7E 


Page 

183 

~ 

b2 , 

b6 , 

b7C , 

b7E 



xxxxxxxxxxxxxxxxxxxxxxxx 

X Deleted Page(s) x 

X No Duplication Fee 



~1(RMP) (FBI) 


AUj^fcjF’OMIATION CONTAINED 

HElSF 13 UNCLASSIFIED 

DATE 03-08-2007 BY 65X79 dtah/kSE/gei 


From: I l (ITOD)(CON) b2 

Sent: , Monday. December 1 1 . 2QQ6 3:3 1 pm b6 

To: I IITQDj (FBI) b7c 

Subject: FW: Uploadinl prom DCS3000 into TA b7E 


UNCLASSIFIED 

NON-RECORD 


DCS Document 


— Original Message- 

From: [ 

Sent: 

To: [ 

Subject: 


l (OM) (FBI) 

Monday, May 22, 2006 1 0:19 AM 


Uploading|_ 


■%TOD)(CON) 

_]from DCS3000 intoTA 


I'm not sure what we are doing wrong or if I mis understood what you told me over the phone last week. We have 
downloaded data (including | Vrom a pen register from the DCS3000 system. We've examined the file 

and the cell data is included in the tile we saved from the DCS3000. Flowever, when we try to upload the data using the 
existing men u options. 7 .1.1 which corresponds to "Upload Menu" - "Pen Register Menu” - "Pen Register Upload 
(normal)", th d l ata does not show up in TA. We uploaded the DCS3000 data first and then uplo aded all the pen 

data from th d K which would include the same records for the pens collecting cell data again). The | p ata 

should not overwrite the cell data with blank field data should it?? Anyway, I wanted to make sure we didn’t nave to create 
a, whole new unload temnlate using "nser-dp-fineri activity nnlnarl" Ip load the cell site data - 1 was fairly sure you mentioned 

f I'm wrong please email me back and let me know. If 

' not, myse ir ana me llsuk i sens may oe making a con f e r ence ca n to you when ever vo u have time - maybe you can step 
us through the process so we can see where we are losing the cell data. Thanks| ] 


Federal Bureau of Investigation 
Omaha Division b2 

10755 Burt St., Omaha, NE 681 14 b6 

b7C 

402-1 iDesk 

402-1 Fax 

402-1 |Main Office 


b2 

be 

b7C 

b7E 
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From: 

Sent: 

To: 

Subject: 



~1 (RMD)(FBI) “ c 

1 l lTODKCON) 

Monday. December 11 2006 3:30 PM 
| , IfJTOP) (FBI) 

FW: Uploading I data from DCS3000 into TA 


UNCLASSIFIED ALL INFORMATION CONTAINED 

NON-RECORD HEREIN 13 UNCLASSIFIED 

DATE 08-08-2007 BY 65179 dmll/llSE/gcl 


DCS Document 

— Original Message 

From: 

Sent: 


I t OM) (FBI) 

Monday, May M65 1 1:16 AM 

J (ITOD)(CON) 


b6 

b7C 


□OM) (FBI)j^ 


□(OM) (FBI);[ 


b2 

b7E 


UNCLASSIFIED 

NON-RECORD 

b6 

b7C 


J my bad, 

e cell data IS uploading into TA - our ELSUR Tech d 


Federal bureau or investigation 
Omaha Division 

10755 Burt St., Omaha, NE 681 14 


402 

402 

402 


Desk 

Fax 

Main Office 


b2 

b6 

b7C 


— Original Message-- 

From: | 

Sent: Monday. May 2 

To: I ~T 

Subject: RE: Uploading^ 

UNCLASSIFIED 

NON-RECORD 


[]lTOD)(CON) 

>9:33 AM 
lOM) (FBI) 

_pata from DCS3000 into TA 


b2 

b7E 

b6 

b7C 


Please send a copy of your data file so I can review. 



— Original Message- 



b7C 


From: | JOM) (FBI) 

Sent: Monday, May 22, 2006 10:19 AM 

To: I I (ITOD)(CON) 

Subject: Uploading! [lata from DCS3000 in 


I'm not sure what we are doing vvrong or if I misunde rstood what you told me over the phone last week. We 
have downloaded data {including I I from a pen register from the DCS3000 system. We've 

examined the file and the cell data is included in the file we saved from the DCS3000. However, when we try to 
upload the data using the existing menu options, 7,1,1 which corresponds to "Upload Menu" - "Pen Register 
Menu" - "Pen Register Upload (normal)", th q ido es not show up in TA. We uploaded the DCS3000 

data first and then uploaded al l the pen data from the f | (which would include the same records for the pens 
collecting cell data again). Th ^ p ata should not overwrite the cell data with blank field data should it?? 
Anyway, I wanted to make sure we didn't have to create a whole new upload template using "user-defined activity 
upload" to load the cell site data - 1 was fairly sure you mentioned I I 

I [if I'm wrong please email me back and let me know. If not, myself and the ELSUR Techs may 

oe maxing a conference call to you whenever you haweJime - maybe you can step us through the process so we 
can see where we are losing the cell data. Thanks 


Federal Bureau of Investig atio n 
Omaha Division 

10755 Burt St„ Omaha, NE 681 14 


)2-| Desk 

>2-1 Fax 

)2-| Main 0 


UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 
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Per TA Annoui 

on 03/ 

' 30/06 

The | ~ 

| ■ 

■e being provided from the DCS3000 Pen 

Register f;- 

ce no lor:* 

needs to be uploaded through the User 

Defined L 

: Activity ; 

oad. There now is a dedicated option 

to automat i 

:VLly upioa: 

this Trace File. 

To load vor 

1 balls 

downloaded from the DCS3000 . 1 








Please understand, though, that this is a phased enhan cement. Currently, with | [ the TA b2 

User Defined Activity Upload will accept up to | [ characters of incoming/outgoing digits per b7E 

call record. Some dedicated pen-register upload formats in the TA (CDNRS, DCS3000, etc.) 
still need to be upgraded by both TA and Engineering Research Facility (ERF) personnel to 
support the new field size. You will be notified when these changes have been completed. 
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OTHER out of scope 
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and 

Privacy Acts 


SUBJECT: DCS 3000 
FOLDER: ADDITIONAL CD MATERIAL 
SECTION #8 
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Technology Support & Development Project (TSDP) 
Monthly Report For Task Order 4 
April 2006 


1.0 Introduction 

Glotech currently has two active tasks with the FBI under the TSDP contract, Task Order 
4 and Task Order 5. Total funds allocated on the TSDP contract to date are as follows: 



Task 4 

Task 5 


Open 

Open 

FY Totals 








FY04 

$ 58,530.00 

$ 33,887.00 

$ 92,417.00 

FY05 

$ 500,743.00 

$ 187,342.00 

$ 688,085.00 

FY06 

$ 528,082.00 

$ 200,307.00 

$ 728,389.00 





(Authorized by Task 

$1,087,355.00 

$ 421,536.00 

$ 1,508,891.00 





| Expended To Date 

$ 866,052.35 

$ 338,556.81 

$ 1,204,609.16 

To complete 

!$ 221,302.65 

$ 82,979.19 

$ 304,281.84 


Task Order 4, the Telephone Application task and task 5, Electronic Surveillance 
Reporting System, started on August 2, 2004. 

This report is for Task Order 4, and covers the reporting period of April 1 , 2006 through 
April 30, 2006. Task Order 5 is covered in separate reports. 

2.0 All Travel Costs 

There were no travel costs associated with Task Order 4 for this reporting period, and 
have been no travel costs associated with this contract to date. 

3.0 AH Other Direct Costs 

There were no Other Direct Costs associated with Task Order 4 for this reporting period. 
There have been no Other Direct Costs associated with this contract to date. 

Consultant Costs 

There have been no Consultant Costs charged to this contract. 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-13-2007 BY 65179 DMH/KSR/JB 
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term solution and load the duration using the duration format SSSS until a new 
duration format can be created for SSSS.S. 

• Helped a customer in the AL field office with an uploading problem. The 

customer selected the wrong duration format. b2 

• Helped a customer in the OC field office who has their firstj tails. b7E 

She wanted to know how to download the appropriate file from the DCSiOOO 

for uploading to TA. When we contacted ERF for instructions, they said to 
have the customer contact ERF directly. 

Assist with Subscriber Uploads: 

• none 

Record Deletions/Modification: 

• Deleted calls for the SD, PH, PX and PG field offices. 

• Modified the end date on a target for a Support Services Technician in the DE 
field office. 

• Changed the Classification from Secret to SN for a target/file number for an 1A 
in the KC field office. 

• Changed the Classification from Secret to SN for a target/file number for a 
Support Services Technician in the PH field office. 

• Deleted calls for the SA, HO, NK, BA, MM, PX and AL field offices. 

• Changed the Classification from Secret to Sensitive/Unclassified for an IA from 
the DE field office. 

• Deleted calls for the WF, PH, HO, AL, LV, LA, and AL field offices. 

• A customer from the DN field office requested for a name to be deleted from 
the security profile. 

• Changed the authorization type on the target (1 record) and call activity (433 
records) records from FISA to NSL for an Intelligence Analyst from the JK 
field office. 

• Added a new alias for Logix Communication Telephone Company for a 
customer in the KC field office. 

• Updated the SBC-Ameritech contact information for an Agent in the DE field 
office. 

• Deleted calls for the BH, LA, NH field offices. 

Security Profiles: 


b2 

b7E 




Week of July 5 - July 11: 


The following is a listing of TA Daily Maintenance 
activities : 


• Daily Customer Support 16 

• Data Deletion/Modification 5 

• Service Support Center Ticket 1 

• Perform Data Upload/Download 2 


Enhancements/Software Releases: 

• Discussed options and issues with a customer in the KC 
field office about her enhancement request for 
allowing normalizing times to daylight savings time. 

• Completed and delivered the test scripts for the 
Targus implementation enhancement, Release 4.8.2. 

• Continued modifications to TA to display the Targus 
file information. 

Data Sharing Interfaces: 

, • Loaded BOP target, call activity, and subscriber 
records for the week ending on 5/28/2006. 

Fix Software Bugs: 

• Started analysis on the Popular Phones report sorted 
by duration on why the durations is sometimes being 
truncated. 

Special Reports: 

• none 

Assist with Activity Uploads: 


b2 

b7E 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-13-2007 BY 65179 BMH/KSR/JE 




b2 

b7E 


Attended the OCIO All Hands meeting. 


Week of July 25 - Aug.l; 

The following is a listing of TA Daily Maintenance 
activities : 


• Daily Customer Support 23 

• Data Deletion/Modification 11 

• Service Support Center Ticket 2 

• Update Public Source Tables 1 


Enhancements/Software Releases: 

• Completed modifications to TA to display the Targus 
file information. Delivered the Source Code 
documentation. 

• Started testing the modifications to TA to display the 
Targus file information 

Data Sharing Interfaces: 

• none 

Fix Software Bugs: 

• none 

Special Reports: 

• none 

Assist with Activity Uploads: 


the DCS3000 pen register. 


b2 

b7E 






Assist with Subscriber Uploads: 

• none 

Record Deletions/Modification: 

• Deleted calls for the CG, CV, PG and DE field offices 
and FT . Monmouth . 

• Changed the device type on a target source record for 
an IA in the NO field office. 

• Changed the Classification from Sensitive/Unclassified 
to Secret for a target and its activity and 
subscribers for a Support Services Technician in the 
PH field office. 
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Technology Support & Development Project (TSDP) 

Monthly Report For Task Order 4 
July 2006 

1.0 Introduction 

Glotech currently has two active tasks with the FBI under the TSDP contract, Task Order 
4 and Task Order 5. Total funds allocated on the TSDP contract to date are as follows: 



Task 4 

Task 5 


Open 

Open 

FY Totals 







FY04 

$ 58,530.00 

$ 33,887.00 

$ 92,417.00 

FY05 

$ 500,743.00 

$ 187,342.00 

$ 688,085.00 

FY06 

$ 528,082.00 

$ 200,307.00 

$ 728,389.00 





| Authorized by Task 

51,087,355.00 

$ 421,536.00 

$ 1,508,891.00 





I Expended To Date 

$ 1,033,048.90 

$ 382,724.52 

$ 1,415,773.42 

To complete 

$ 54,306.10 

$ 38,811.48 

$ 93,117.58 


Task Order 4, the Telephone Application task and task 5, Electronic Surveillance 
Reporting System, started on August 2, 2004. 

This report is for Task Order 4, and covers the reporting period of July 1, 2006 through 
July 3 1 , 2006. Task Order 5 is covered in separate reports. 

2.0 All Travel Costs 

There were no travel costs associated with Task Order 4 for this reporting period, and 
have been no travel costs associated with this contract to date. 

3.0 All Other Direct Costs 

There were no Other Direct Costs associated with Task Order 4 for this reporting period. 
There have been no Other Direct Costs associated with this contract to date. 

Consultant Costs 

There have been no Consultant Costs charged to this contract. 


ALL IMF0RI1ATI0H CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-13-2007 BY 65179 DMH/KSR/JB 
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• Completed fixing the modifying of the Other Number on the Other Number 
window. Also corrected the display of the Other Number on the main Modify 
Call Activity screen when returning from the Other Number window. This was 
found and corrected as part of the Targus implementation enhancement. 

Special Reports: 

• none 

Assist with Activity Uploads: 


pen register files from the DCS3000 pen register. 
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Assist with Subscriber Uploads: 
• none 


Record Deletions/Modification: 

• Changed the Classification from U to S for a Target, activity and subscribers for 
a Support Services Technician 1 the PH field office. 

• Deleted duplicate subscriber records for an Investigative Support Specialist in the 
LV field office. 

• Deleted calls for the PX, NO, DL, CV, PH, MM , IP, DE, NH NK, Ventura RA 
(LA) and DN , CG, PG and BS field offices. 

• Modified the file number for a target and subscriber and instructed the Technical 
Information Specialist in the LR field office how she can do this change herself, 
in the future. 

• Changed a series of From or To numbers to the target number in 3,985 calls for an 
IA in the MW field office. 

• Changed a target and 647 activity records to Title III for a date range for a 
Support Services Technician in the AT field office. 

• Provided instructions to a Special Agent in the BS field office on how to delete a 
subscriber record. 

• Changed the device type bn a target source record for an IA in the NO field 
office. 

• Changed the Classification from Sensitive/Unclassified to Secret for a target and 
its activity and subscribers for a Support Services Technician in the PH field 
office. 


S ecurity Profiles: 






• Helped a Support Servi ces Technician from the PH field 
office on how to enter f~ | toll records. 

Answered questions about the incoming calls and what 
some of the columns mean. 

Completed COOP Awareness Presentation training. 


Week of March 22 - 28: 

The following is a listing of TA Daily Maintenance b2 

activities: b7E 


• Daily Customer Support 19 

• Data Deletion/Modification 5 

• Update Public Source Tables 1 

• Perform Data Upload/Download 3 

• Enhancement 1 


Enhancements/Software Releases: 

• Completed second testing of option to upload the 

trace file from the DCS pen register device. 

• Completed development and started second testing to 
add 3 new telephone companies as the Origin of 
Subscriber information. 


Data Sharing Interfaces: 

• Loaded BOP Target, Activity and Subscriber information 
for the week of 01/08/2006 and 02/26/2006. 


Fix Software Bugs: 

• Completed fixing problem on the Leads Generation for 
the phone company/country information on the Download 
option when a date range was specified. Started 
documenting the change. 

Special Reports: 

• None 


Assist with Activity Uploads: 


:b2 

b7E 




calls from the DCS3000 pen registe: 


Assist with Subscriber Uploads: 

• None 

Record Deletions/Modification: 

• Deleted calls from the Cl, NH and BH field offices. 

• Modified target and activity records to be FISA 
records for a Case Information Assistant in the SA 
field office. 

Security Profiles: 


Area Codes/Exchanges and Foreign Country/City Codes 





I 
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Technology Support & Development Project (TSDP) 

Monthly Report For Task Order 4 
March 2006 

1.0 Introduction 

Glotech currently has two active tasks with the FBI under the TSDP contract, Task Order 
4 and Task Order 5. Total funds allocated on the TSDP contract to date are as follows: 



Task 4 

Task 5 


Open 

Open 

FY Totals 






i 

FY04 

$ 58,530.00 

$ 33,887.00 

$ 92,417.00 

FY05 

$ 500,743.00 

$ 187,342.00 

$ 688,085.00 

FY06 

$ 528,082.00 

$ 200,307.00 

$ 728,389.00 





| Authorized by Task 

$1,087,355.00 

$ 421,536.00 

$ 1,508,891.00 





| Expended To Date 

$ 801,281.47 

$ 316,401.72 

$ 1,117,683.19 

To complete 

$ 286,073.53 

$ 105,134.28 

$ 391,207.81 


Task Order 4, the Telephone Application task and task 5, Electronic Surveillance 
Reporting System, started on August 2, 2004. 

This report is for Task Order 4, and covers the reporting period of March 1, 2006 through 
March 31, 2006. Task Order 5 is covered in separate reports. 

2.0 All Travel Costs 

There were no travel costs associated with Task Order 4 for this reporting period, and 
have been no travel costs associated with this contract to date. 

3.0 All Other Direct Costs 

There were no Other Direct Costs associated with Task Order 4 for this reporting period. 
There have been no Other Direct Costs associated with this contract to date. 

Consultant Costs 

There have been no Consultant Costs charged to this contract. 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 08-13-2007 BY 65179 DHH/KSR/JB 
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Week of May 3-9: 

The following is a listing of TA Daily Maintenance 
activities : 


• Daily Customer Support 24 

• Data Deletion/Modification 2 

• Perform Data Upload/Download 4 

• Update Public Source Tables 2 


Enhancements/Software Releases: 

• Reviewing preliminary requirements to implement the 
retrieval and display of the Targus file information 
in TA. 

• Completed development and started documentation for an 
enhancement on the display of an unknown number in a 
third party call. 

Data Sharing Interfaces: 

• Loaded weekly BOP target, activity and subscriber 
information for the week ending on 03/19/06. Loaded 
weekly BOP subscriber information for the week ending 
on 03/26/06. (It has been requested that we do not 
load any BOP activity records until a new file extent 
is added to the TA-ACTIVITY file.) 

Fix Software Bugs: 

• Started second testing for the pen register uploads 
when the raw data and caller id information exceeds 
250 characters. 

• Continued second testing on a fix for the Leads 
Download option display of fields on the last record 
when additional criteria to the file number have been 
given. 

Special Reports: 

• None. 


b2 

-b7E 


st with Activity Unloads: 


ALL INFORMATION CONTAINED 

HEREIN 15 UNCLASSIFIED 

DATE 08-13-2007 BY 65179 DMH/KSR/JB 
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Technology Support & Development Project (TSDP) 
Monthly Report For Task Order 4 
May 2006 


1.0 Introduction 

Glotech currently has two active tasks with the FBI under the TSDP contract, Task Order 
4 and Task Order 5. Total funds allocated on the TSDP contract to date are as follows: 



Task 4 

TaskS 


Open 

Open 

FY Totals 







FY04 

$ 58,530.00 

$ 33,887.00 

$ 92,417.00 

FY05 

$ 500,743.00 

$ 187,342.00 

$ 688,085.00 

FY06 

$ 528,082.00 

$ 200,307.00 

$ 728,389.00 





| Authorized by Task 

Sl,087, 355.00 

$ 421,536.00 

$ 1,508,891.00 





| Expended To Date 

$ 888,032.43 

$ 355,695.23 

$ 1,243,727.66 

To complete 

$ 199,322.57 

$ 65,840.77 

S 265,163.34 


Task Order 4, the Telephone Application task and task 5, Electronic Surveillance 
Reporting System, started on August 2, 2004. 

This report is for Task Order 4, and covers the reporting period of May 1 , 2006 through 
May 3 1 , 2006. Task Order 5 is covered in separate reports. 

2.0 All Travel Costs 

There were no travel costs associated with Task Order 4 for this reporting period, and 
have been no travel costs associated with this contract to date. 

3.0 All Other Direct Costs 

There were no Other Direct Costs associated with Task Order 4 for this reporting period. 
There have been no Other Direct Costs associated with this contract to date. 

Consultant Costs 

There have been no Consultant Costs charged to this contract. 


ALL INFORMATION C OBTAINED 

HERE III IS UNCLASSIFIED 

DATE 08-13-2007 BY 65179 DMH/KSR/JB 
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• Answered a question from a Support Services Clerk in the HO field office who 
wanted to know if e-mail addresses could be uploaded into TA like subscriber 
records. 

• Answered questions from a customer in the Ft. Monmouth ITC on how to upload 
third party calls and questions about time ad duration formats. 

• Helped a Telecommunications Specialist in the HO field office who wanted an 
explanation of the fields in the upload file from the DCS3000 pen register devise. 

• Helped a Support Services Technician in the NY field office to determine when 
she should use the new upload option. Upload Records (Tolls) Processed by 
CTD/CAU). 

• Responded to multiple e-mails from a Supervisory Intelligence Analyst in the SJ 
field office who wanted to know why she the records in error files were errors. 
These problems included phone numbers that had been converted to scientific 
notation by Excel and invalid domestic area code and exchange messages. The 
SI A said that she had resolved her questions. 

• Helped a Support Services Technician in the DL field office who was getting an 
Open File Failure message when trying to upload. Suggested some options that 
may help. She has recently moved and is having other computer/network 
problem. 

• Helped an IA in the BS field office with correcting a file where Excel had 
converted the phone numbers into scientific notation. Also answered questions 
about loading an AT&T Excel file into TA. 

• Helped a customer in the SD field office on why she was getting “An Area Code 
is Required: error message. It was determined that her upload template was not 
defined correctly. 

• Answered a question for a Speci al Agen t in the OM field office about the format 

and information contained in the| pen register upload file. 

• Helped a Special Agent in the OM field office with loading pen register records 
from the DCS3000 into TA. He wanted to have the cell site and switch id 
information loaded. 

• Helped a Support Services Technician understand the message when upload ) j 
| | pens that the times will be represented in the GMT time zone. 

• Helped an IA in the BS field office to upload her file into TA. The problem was 
area code and exchanges that were not valid. 

• Helped an IA in the WFO on how to upload her pen register files. Also showed 
her how to access the TA web site. 

• Explained to a Telecommunications Specialist in the SJ field office what the 
message “Warning: Invalid Forward to Number” meant. It was probably a 
routing number that the telephone company passed in the Forward to number 
field that did not have a valid area code/exchange. 

• Helped an IA in the NK field office on how to upload Pin numbers when using 
the User Defined Upload. 



I • 

For Official Use Only//Law Enforcement Sensitive July 2006 

PEN REGISTERS:! 


Per T A Announcement on 03/30/06 

' jxrace File being provided from the DCS3000 Pen 

Register Device no longer needs to be uploaded through the User b2 
Defined Call Activity Upload. There now is a dedicated option b7E 
to automatically upload this Trace File. 


b 2 I |Calls downloaded from the DCS3000, first select 

b7E option '7. Upload Menu.' From the Upload Menu, select option 
'1. Upl oad Pen Register Menu’. Next, select option '2. | 

| ^ Pen Register Upload (Trace Files only) ' . You will then 

see the window to select your options: Exception Report Type, 

Test Upload and Duplicates. Select the options that you want 
for your upload (or keep the defaults) and press Enter. 

Finally, select the trace file to upload. 


b2 

b7E 


For this, option, you do not need to make any modifications to 
the file at all, and you do not need to add a time zone column 
as you did when u sing the User Defined Call Activity Upload. 

I Pens will be loaded and the time zone will be 

assigned as GMT. 

And just as a reminder, the actual □ Number cannot be loaded 
as a Target .reco rd. Instead, you will need to have the actual 
phone number the number is associated to loaded as a Target 
prior to entry. 


Please also note that there are various topics, such. as dealing 
with PenLink, Area Code /Countr y Code information, uploading .PDF 

files, dealing with | [data, as well as others on the TA 

Website located at the following a ddress : 


You can copy this 'address and paste it in your browser to see 
these and all the other topics available to further assist you 
in the use of the Telephone- Application. 


Note: As of May 2006, the NYO's/Management Information Systems Unit 
(MIS) is responsible for uploading Pen Re giste /f~ \te/com record s 

into the TA database. Please contact 55 1 \212-\ 


b2 

b6 


b7C 

b7E 


Per November 2005 TA Upgrade: 


98 
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for the error records (e.g., errors.txt) and then click on "Download" button. 


PEN REGISTERS: 


b2 

b7E 


Per T A Announcement on 03/30/06 

| i Traco File being provided from the DCS3000 Peri 

Register Device no longer needs to be uploaded through the User 
Defined Call Activity Upload. There now is a dedicated option 
to automatically upload this Trace File. 

I I Cal Is downloaded from the DCS3000, first select 

option '7. Upload Menu.' From the Upload Menu, select op tion 
'1. Upl oad Pen Register Menu'. Next, select option *2. 1 I 

| ~| Pen Register Upload {Trace Files only) ' . You will then 

see the window to select your options: Exception Report Type, 

Test Upload and Duplicates. Select the options that you want ^ 
for your upload (or keep the defaults) and press Enter. 

Finally, select the trace file to upload. 


For this option, you do not need to make any modifications to 
the fiLe at all, and you do not need to add a time zone column 
as you did when using the User Defined Call Activity Upload. 

| | Pens will be loaded and the time zone will be 

a s s i g n e d as GM T . 

And just as a reminder, the actual ] [ -lumber cannot be loaded 

as a Target recoixL. .Instead, you will need to have the actual 

phone number. the I I number is associated to loaded as a Target 
prior to entry. I I 


Note: As of May 2006. the NYO's/Manageme nt Information S ystems Unit 
(MIS) is responsible for uploading Pen Reaiste X I te/com records 

into the TA database. Please contact SS \ | 212 - 1 | 


1) Logon to FBINET. 

2) Select Telephones from the Menu that appears (F7 or F8, etc). 


b2 

b6 

b7C 

b7E 


3) "Telephone Application Version 4.8 Screen" appears: 
-Hit Enter and Menu appears 
-Type 7 to select "Upload Menu” and press Enter 


99 



Freedom of Information 

and 

Privacy Acts 


SUBJECT: DCS 3000 
FOLDER: ADDITIONAL CD MATERIAL 
SECTION #10 



Federal Bureau of Investigation 







"SECRET 

rS^eTfrerarOseOBiy 

CUST Approval Granted 
ITOD 

• 

Req. IOC Effort Type 
Original 

Original 

r prl Team ^ 

cul 1 

Effort Status 
Undergoing Certification 

Registered 

CIRG 


Original 

cu( I Registered 

ITSlI Iccredited 

SecO Operate 

20-Feb-04 

19-Feb-07 Original 

CD 

RMD Interim 

30-JUI-03 

30-Jan-04 Original 

n 

Undergoing Certification 
Certified 

CTD Interim 

06-Feb-04 

05-Aug-04 Original 

«o 

IATO 

ITD Operate 
ITD Operate 

20-Aug-01 

07-May-03 

19-Aug-04 Original 
07-May-06 Original 

cu| | Registered 

ITSU| ~1 Registered 

cul I Accredited 

Cu| | Accredited 

SecD 


Original 

«□ 

cuCZ] 

Registered 

ITD Operate 

14-Jun-04 

27-Feb-03 

29-May-03 

13-Jun-07 Original 

27- Feb-06 Original 

28- May-06 Original 

Accredited 

Accredited 

Accredited 

ITD 

ITD Operate 

30-May-03 

Original 
29-May-06 Original 

cjr~~1 

Undergoing Certification 
Accredited w/ Action Plan 

CD 


Original 

cul 1 

Undergoing Certification 

ITD 

DN 


Original 

Original 

CM ~ 1 

Registered 

Registered 


3o^©fflciirDiBH0»^ 
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^eciTet 


FoFQIftctaKiSESniy 
Operation Mayday 


System 

(U) Data Collection System 3000 (DCS 3000) (aka 
CALEA (Communications Assistance to Law 
(U) Data Collection System 6000 (DCS 6000) (aka 
Dinital Stormt 



$ un iT O im c nrn J 


C&&A 

ITSU 

ITSU 

ITSU 

ITSU 

ITSU 

ITSU 

ITSU 

ITSU 

CU 

ITSU 

ITSU 

ITSU 

ITSU 

CU 

ITSU 


Classification 

Secret 

Sensitive But Unclassified 

Secret 

Secret 

Sensitive But Unclassified 
Top Secret 

Sensitive But Unclassified 
Secret 

Top Secret SCI 
Top Secret SCI 
Secret 

Sensitive But Unclassified 
Top Secret SCI 
Secret 

Undetermined 


Status 

In Review for Accreditation 

In Review for Accreditation 

In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 
In Review for Accreditation 


Key to notes: 

? Unknown if testing is required 

N No test activity required 

Y Test required, but not started 

I Test activity in progress 

C Test activity Completed 


ITSU 

ITSU 

ITSU 

ITSU 

CU 

ITSU 

ITSU 

ITSU 

ITSU 

CU 

ITSU 

CU 

ITSU 

ITSU 

CU 

ITSU 

ITSU 


Sensitive But Unclassified 
Sensitive But Unclassified 
Secret 
Secret 

Top Secret SCI 
Secret 

Sensitive But Unclassified 
Sensitive But Unclassified 
Secret 
Secret 

Sensitive But Unclassified 
Secret 

Sensitive But Unclassified 

Secret 

Secret 

Sensitive But Unclassified 
Secret 


in Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 
In Progress 


** Systems in Boid/Blue will exercise no.l assistance for C&A a ctivities as coo rdinated with UCs| 

POCs for DOJ Team are FBI - | |j "h nd DOJ i 1 

DOJ Team are available in Room 1 B948 and via Groupwise Email! 


DOJ Team members are: 


b6 

b7C 


be 

b7C 



DATE: 03-16-2007 

CLASSIFIED BY 65179 DHH/KSR/JB 

PEASOH: 1.4 (g) 

DECLASSIFY OH: 03-16-2032 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


SECRET" 







—SEGRtf 



Top Secret SCI ITD 


Top Secret SCI ITD 


bl 3000) (aka CALEA 

b2 (Communications 

b 7 E Assistance to Law 

Enforcement Act)) 




System 5000 (DCS Collection 


20-Aug-01 1 9-Aug-04 


07-May-03 07-May-06 


27-Feb-03 27-Feb-06 


29-May-03 28-May-06 


TSl ] [ tegi 

TSU ] I £5 

-U- l I Aeon 

CD 

CD 


Friday, April SO, 2004 
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-SEeftET 


C ^ /"*/ .•/!, 





Sensitive But Unclassified 

ITD Operate 

1 5-Apr-04 

14-Apr-07 Original 


Sensitive But Unclassified 

ASD 


Original 


Sensitive But Unclassified 

FD 


15-Jan-05 Original 


Secret 

SecD Operate 

20-Feb-04 

1 9-Feb-07 Original 


Secret 

CD 


Original 


Secret 

RMD Operate 

18-Oct-04 

1 8-Oct-07 Original 


Secret 

CID 


Original 


Sensitive But Unclassified 

LV 


Original 


Secret 

ITD Operate 

20-Aug-01 

19- Aug-04 Original 


Top Secret SCI 

ITD Operate 

07-May-03 

07-May-06 Original 


Secret b2 

b7E 

SecO 


Original 


Secret 

OIO Operate 

14-Jun-04 

13-Jun-07 Original 

i Top Secret SCI 

ITD Operate 

27-Feb-03 

27-Feb-06 Original 

Data Collection System 3000 (DCS 3000) (aka 
CALEA (Communications Assistance to Law 
Enforcement Act)) 

Sensitive But Unclassified 

ITD Operate 

29-May-03 

28-May~06 Original 

Data Collection System 5000 (DCS 5000) 

Secret 

ITD 


Original 

Data Collection System 6000 (DCS 6000) (aka 
Digital Storm) 

Sensitive But Unclassified 

ITD Operate 

30-May-03 

29-May-06 Original 


Secret b 1 

b2 

Top Secret SCI ^7E 

CTD 


30-Sep-04 Original 

Z J 

CD Operate 

18-Oct-04 

1 7-Oct-07 Original 

j Undetermined 

ITD 


Original 

I Sensitive But Unclassified 

DN 


Original 



Cert Team Ef fort Status 

ITSU | A ccredited 


Undergoing Certification 


Ct | | Registen 


a 


M I 

ITSl I U ndergoing Certification 




cQ 



Undergoing Certification 

Accredited 

Accredited 


Accredited 


Cu| I Undergoing Certification 

cu l I Accredited w ( Action Plan 

Cli I Undergoing Certification 

Cli| | Accredited w/ Action Plan 


ct | 1 


Tuesday, November 30, 2004 


b 2 
b7E 


ForllHtoial-ysCSnJY^ 


Page 3 of 12 



-seeRn — 


From: 

To: 

Date: 

Subject: 


b6 

b7C 


Tue, Nov 19, 2002 12:26 PM 

In Accreditation 


In Accreditation 

DCS 6000 r 


In Testing, nr Await ing Test Rennrt: 


DATE: 08-16-2007 

CLASSIFIED BY 65179 BHH/'KSR/JB 

REAS0JJ: 1.4 [g) 

DECLASSIFY OH: 08-16-2032 


ALL IHF0RHATI0H COHTAINED 
HERE III IS TJHCLAS3IFIED EXCEPT 
WHERE SHOOT OTHERWISE 


(S)[ 


Awaiting System Owner Modifications/Documents: 
D CS 10 00 1CA 1.EA) 


Undergoing Certification Package Modifi cations/Review: 


Awaiting SC I Clearance: 


5 1 


Undergoing Major Modifications; C&A to Commence/Resume 
After Mods/New EC Date: 


I 1 b6 

| | b7C 

Management Analyst 
New Systems/Legacy Systems 
Certific ation Units 
I i Rm. 9678 


CC: 


__stefter 



— SECRET 


bo 

b7C 


From: 


Date: Fri, Nov 8, 2002 3:54 PM 

Subject: LEGACY SYSTEMS WEEKLY STATUS REPORT 


b2 

b7E 


In Accreditation 

DCS 6000 r 


DATE: 08-16-2007 

CLASSIFIED BY 65179 DHH/KSR/JB 

REAS OH; 1.4 (g) 

DECLASSIFY OH: 08-16-2032 


bl 

b2 

blE 


In Testing, or Awaiting Test Repor t: 


!S)[ 


Awaiting System Owner Modifications/Documents: 

DCS 3000 (CAL EA) 


ALL IHFQPHATI0H COHTAIMED 
HEKEIH IS TJHCLASSIFIED EXCEPT 
WHERE SHOOT OTHERWISE 


Undergoing Certification Package Modifica tions/Review: 


:b2 

b7E 


Awaiting SC I Clearance: 


Undergoing Major Modifications; C&A to Commence/Resume 
After Mods/New EC Date: 


Management Analyst 
New Systems/Legacy Systems 
Certifica tion Units 
| | Rm. 9678 


be 

b7C 


.SEeftffT 






-SEeffer 


bl 

b2 

b7E 


isj[ 


Awaiting System Owner Modifications/Documents: 

DCS 3000 (CAL EA) 


b2 

b7E 


Undergoing Certification Package Modifi cations/Review: 


Awaiting SCLClearance: 


Undergoing Major Modifications; C&A to Commence/Resume 
After Mods/New EC Date: 


Management Analyst 
New Systems/Legacy Systems 
Certification Units 


]Rm. 9678 


b6 

b7C 


_S£6ftFT 




-StGREf 


From: b/c 

To: 

Date: Wed, Nov 13, 2002 8:22 AM 

Subject: Re: LEGACY SYSTEMS WEEKLY STATUS REPORT 


Sorry] |I was out yesterday. 

I used the word "vice" in the sense of "instead of', or "in place of'. 


Jl 1/08/02 05:40PM »> 


DATE: 08-16-2007 

CLASSIFIED BY 65179 DMH/KSR/JI 

PEAS0H: 1.4 (gr) 

DECLASSIFY ON: 08-16-2032 


I was refer ring to the term "vice". Does it stand for something? 


>»| 1 11/08 5:20 PM »> where shown otherwise 

I only put in what I am given, b ut it is my understanding that in this instance, testing >Q was 
needed. Please con tacl j ~| or the team leader for the actual interpretation. 

Thanks! j 


»i 1 11/08/02 04:27PM »> 

n — i 1 

The fol lowing sentence contains a term (underlined) with which I am not familiar: "Tested 
against | [ Could you give me an explanation? 

Thanx 


11/08 3:54 PM »> 


In Accredita tion 

DCS 6000 1 




Awaiting System Owner Modifications/Documents: 

DCS 3000 (C AT. F. At 





















SECRET WORKING PAPERS 
(Pending Classification by RMD) 


Ku) 

: (S) 

SPONSOR 

COOP, or 

fT ASSET NAME Cent Plan 

Exist’ 

, ' mi 

. Last 
Update 

. Plan t 
Deployed 

Last •; Recovery , Recovery.' 
Tested k T mit Quantity j 

j Recovery | Backup j 
j Quality i Method - 

j- Frequency- 

, ■ Last 
Backup 
Date 

: 

| 

j* Where,. 
Backup | 
Stored 

(U) 

OTD 


b2 










(U) 

OTD 










J 



(S) 

OTD 

Irst 

1 

1 










(U) 

OTD ' 

(S) 

] 

IE 










~x’ 

OTD 

Digital Collection System 
3000 Csjf (UJ 












(U) 

OTD 

Digital Collection System 
Network 













AIL INFORMATION CONTAINED 
HERE IN IS UNCLASSIFIED EXCEPT 

DATE: 03-16-2007 WHERE 3H0OT 0THEMISE 

CLASSIFIED BY 6S179 DMH/KSE/JB 
PEA30N: 1,4 (g) 

DECLASSIFY ON: 08-16-2032 


-SECRET WORKING PAPERS 
(Pending Classification by RMD) 




SSeR^T WORKING PAPERS 
(Pending Classification by RMD) 



DATE: 08-16-2007 
CLASSIFIED EE 65179 DHH/KSR/JB 
FEASOH: 1.4 (gj 
DECLASSIFY Oil: 00-16-2032 

ALL IITFORHATIOD CQHTAINED 
HEREIN IS OTCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


secret" WORKING PAPERS 
(Pending Classification by RMD) 


_£EG«erWORKING PAPERS 
(Pending Classification by RMD) 


(li) 

(St 

SPONSOR 

IT ASSET NAME 

acronym 

CLASS. 

TYPE | 

(U) 

ITOD / RMD 

L 

| WACS 

Secret 

Application 

(U) 

CTO 

j j IDW-S/IDW-I 

Secret 

System 

(U) 

01 


IRCM 

SBU 

Database 

(U) 

OTD 


CARTFOS 

Secret 

Network and 
Stand Alone 

(U) 

OTD 


CART SAN 

SBU 

Network 

(S) 

OTD J 

— ^ 1 

(S I 1 

TSSCI 

System 

(U) 

OTD l 

1 

(Si 1 

TS SCI 

System 

X 

OTD 

Digital Collection System )^[DCS 3000 

3000 Tsy (tn 52L l 

SBU 

System 

(U) 

| OTD | 


DCSNet 

SBU 

Network 
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DATE: 08-16-2007 

CLASSIFIED BY 6S173 DHH/KSR/JB 

REASON: 1.4 (g) 

DECLASSIFY OH: 08-16-2032 


All INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOW OTHERWISE 


WORKING PAPERS 
(Pending Classification by RMD) 
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bl 

b2 

b7E (S) 

(U) 

x 

(U) 


1 I s ) ( s CZ] 

1 ~| s) (S) | I 

Digital Collection System 3000 Jg) j£s£[DCS 3000 ] 
Digital Collection System Network DCSNet 


Investigative Technology Division 
Investigative Technology Division 
Investigative Technology Division 
Investigative Technology Division 


(U) 


Investigative Technology Division 


DATE: 08-09-2007 

CLASSIFIED BY S5179 ALL INFORMATION CONTAINED 

REASON: 1.4 (g) HEREIN IS UNCLASSIFIED EXCEPT 

DECLASSIFY ON: 08-09-2032 WHERE SHOOT OTHERWISE 


Investigative Technology Division 
Investigative Technology Division 

Investigative Technology Division 

Investigative Technology Division 
Investigative Technology Division 
Investigative Technology Division 
Investigative Technology Division 

Investigative Technology Division 

Investigative Technology Division I 
Electronic Surveillance Section / 
TRU/ Unit Chief 

Investigative Technology Division / 
Electronic Surveillance Technology 
Section / ELSUR Data Management 
Office 

Investigative Technology Division / 
Forensic Audio, Video & Image 
Analysis Unit (FAVIAU) 
Investigative Technology Division / 
Technical Operations Section / 
Tactical Operations Support Center 
(TOSC) 
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Inquire 


Cryptoanalysis 

Initiative Network 

Inquire 

New 
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DCS3000 (SBU) 
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1 1 1 






OTHER out of scope 
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1 _ 
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